When an auditor sets control risk low, sufficient evidence can be obtained for most payroll accounts through an understanding of internal controls, substantive analytical procedures, and tests of details of transactions. However, there are several accounts in the payroll cycle that may require more attention.

Name the accounts and explain why the additional testing is necessary.